Source/WebKit/Shared/mac/SecItemRequestData.cpp

/*
 * Copyright (C) 2011-2019 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#include "config.h"
#include "SecItemRequestData.h"

#include "ArgumentCoders.h"
#include "ArgumentCodersCF.h"
#include "SecItemSPI.h"
#include <CoreFoundation/CoreFoundation.h>

namespace WebKit {

SecItemRequestData::SecItemRequestData()
    : m_type(Invalid)
{
}

SecItemRequestData::SecItemRequestData(Type type, CFDictionaryRef query)
    : m_type(type)
    , m_queryDictionary(query)
{
}

SecItemRequestData::SecItemRequestData(Type type, CFDictionaryRef query, CFDictionaryRef attributesToMatch)
    : m_type(type)
    , m_queryDictionary(query)
    , m_attributesToMatch(attributesToMatch)
{
}

void SecItemRequestData::encode(IPC::Encoder& encoder) const
{
    encoder.encodeEnum(m_type);

    encoder << static_cast<bool>(m_queryDictionary);
    if (m_queryDictionary)
        IPC::encode(encoder, m_queryDictionary.get());

    encoder << static_cast<bool>(m_attributesToMatch);
    if (m_attributesToMatch)
        IPC::encode(encoder, m_attributesToMatch.get());
}

static bool isValidType(CFTypeRef);

static bool arrayContainsInvalidType(CFArrayRef array)
{
    CFIndex entryCount = CFArrayGetCount(array);

    for (CFIndex entry = 0; entry < entryCount; ++entry) {
        CFTypeRef value = reinterpret_cast<CFTypeRef>(CFArrayGetValueAtIndex(array, entry));
        if (!isValidType(value))
            return true;
    }

    return false;
}

static bool dictionaryContainsInvalidType(CFDictionaryRef dict)
{
    CFIndex entryCount = CFDictionaryGetCount(dict);

    Vector<const void*> keys(entryCount);
    Vector<const void*> values(entryCount);
    CFDictionaryGetKeysAndValues(dict, keys.data(), values.data());

    for (CFIndex entry = 0; entry < entryCount; ++entry) {
        CFTypeRef key = reinterpret_cast<CFTypeRef>(keys[entry]);
        if (!isValidType(key))
            return true;

        CFTypeRef value = reinterpret_cast<CFTypeRef>(values[entry]);
        if (!isValidType(value))
            return true;
    }

    return false;
}

#if PLATFORM(MAC)
typedef std::array<CFTypeID, 16> ValidTypes;
#else
typedef std::array<CFTypeID, 13> ValidTypes;
#endif

static const ValidTypes& validTypeIDs()
{
    static ValidTypes types = {{
        CFBooleanGetTypeID(), CFDataGetTypeID(), CFStringGetTypeID(), CFNullGetTypeID(), CFNumberGetTypeID(),
        SecAccessControlGetTypeID(), SecCertificateGetTypeID(), SecCodeGetTypeID(), SecIdentityGetTypeID(),
        SecPolicyGetTypeID(), SecRequirementGetTypeID(), SecStaticCodeGetTypeID(), SecTrustGetTypeID()
#if PLATFORM(MAC)
        , SecACLGetTypeID(), SecAccessGetTypeID(), SecTrustedApplicationGetTypeID()
#endif
    }};

    static dispatch_once_t onceToken;
    dispatch_once(&onceToken, ^{
        std::sort(types.begin(), types.end());
    });

    return types;
}

static bool isValidType(CFTypeRef type)
{
    auto typeID = CFGetTypeID(type);
    if (typeID == CFDictionaryGetTypeID())
        return !dictionaryContainsInvalidType(reinterpret_cast<CFDictionaryRef>(type));

    if (typeID == CFArrayGetTypeID())
        return !arrayContainsInvalidType(reinterpret_cast<CFArrayRef>(type));

    const auto& validTypes = validTypeIDs();
    
    bool validType = std::binary_search(validTypes.begin(), validTypes.end(), typeID);
    if (!validType) {
        String typeName { adoptCF(CFCopyTypeIDDescription(typeID)).get() };
        WTFLogAlways("SecItemRequestData::decode: Attempted to serialized invalid type %s", typeName.utf8().data());
    }
    return validType;
}

bool SecItemRequestData::decode(IPC::Decoder& decoder, SecItemRequestData& secItemRequestData)
{
    if (!decoder.decodeEnum(secItemRequestData.m_type))
        return false;

    bool expectQuery;
    if (!decoder.decode(expectQuery))
        return false;

    if (expectQuery) {
        if (!IPC::decode(decoder, secItemRequestData.m_queryDictionary))
            return false;

        if (dictionaryContainsInvalidType(secItemRequestData.m_queryDictionary.get()))
            return false;
    }
    
    bool expectAttributes;
    if (!decoder.decode(expectAttributes))
        return false;
    
    if (expectAttributes) {
        if (!IPC::decode(decoder, secItemRequestData.m_attributesToMatch))
            return false;

        if (dictionaryContainsInvalidType(secItemRequestData.m_attributesToMatch.get()))
            return false;
    }

    return true;
}

} // namespace WebKit